> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fortytwo.network/llms.txt
> Use this file to discover all available pages before exploring further.

# Cookie Policy

**Effective date:** 3 October 2026

## 1 Scope and who is responsible

This Cookie Policy explains how Fortytwo MENA Limited, incorporated in Abu Dhabi Global Market, Abu Dhabi, United Arab Emirates, with registration number 36387 and registered address DD-14-117-013, Floor 14, Al Khatem Tower, WeWork Hub71, ADGM Square, Al Maryah Island, Abu Dhabi, United Arab Emirates ("Fortytwo", "we", "us") uses cookies and similar technologies on the Fortytwo Platform.

The "Platform" means the web interface of the Fortytwo API: the developer console, playground, sign-in and account pages, API key management, credits balance and billing pages, and usage analytics. It forms part of the "Services" described in our [Terms of Service](/legal/terms-of-service) and [Privacy Policy](/legal/privacy-policy).

Our public websites at fortytwo.network and harbor.fortytwo.network are not part of the Platform. They do not use analytics or advertising cookies. Information you send through forms on those websites is covered by the [Privacy Policy](/legal/privacy-policy).

This Policy supplements [Section 11 of our Privacy Policy](/legal/privacy-policy#11-cookies-and-similar-technologies). The Privacy Policy explains how we handle personal data more generally, including the legal bases we rely on, retention, international transfers, and your rights. Where this Policy uses a defined term without explaining it, it has the meaning given in the Privacy Policy.

Requests you send to the Fortytwo API with an API key are server-to-server calls. They do not use cookies, and nothing in this Policy changes how we process Customer Content.

## 2 In short

* We use two kinds of cookies on the Platform: **strictly necessary** cookies, which keep the Platform working and secure, and **analytics** cookies, which help us understand how the Platform is used so we can improve it.
* Analytics cookies are off until you allow them, and they are only used after you sign in. You can accept, decline, or change your choice at any time.
* We do not use advertising, retargeting, or cross-site tracking cookies. We do not sell data collected through cookies, share it for cross-context behavioural advertising, or use it for advertising of any kind.
* Your cookie choice does not affect how we process your prompts or outputs. Inference content stays under our default zero data retention handling whatever you choose.

## 3 What cookies and similar technologies are

Cookies are small text files that a website stores in your browser. They let the website recognise your browser while you use it or when you return.

"Session" cookies are deleted when you close your browser. "Persistent" cookies stay until they expire or you delete them. "First-party" cookies are set on the domain of the website you are visiting. "Third-party" cookies are set on the domain of another provider whose service the website uses.

Websites can also use similar technologies, such as browser local storage, session storage, and scripts or software development kits (SDKs) provided by service providers. In this Policy, "cookies" covers all of these technologies unless we say otherwise.

We do not use tracking pixels, web beacons, or device fingerprinting for our own purposes on the Platform. Stripe's payment form collects device and browser signals for fraud prevention on the credits page, as described in Section 7.

## 4 Cookies we use

### 4.1 Strictly necessary cookies

These cookies are essential for the Platform to work, and you cannot switch them off in our cookie settings. They are used to:

* **Sign you in and keep you signed in** as you move between pages, and to sign you out securely.
* **Protect your account and the Platform**, for example by preventing cross-site request forgery, detecting unusual sign-in activity, protecting against automated abuse, and enforcing rate limits on the Platform's web interface.
* **Process payments securely** when you add credits. Our payment provider, Stripe, opens its payment form on the credits page and uses cookies there to prevent fraud and process transactions.
* **Remember a device you trust**, if you leave "Remember this device for 30 days" ticked when signing in with two-factor authentication, so that we do not ask for a code every time you sign in on that device.
* **Remember your cookie choices**, so that we do not ask you again on every visit and do not set analytics cookies after you decline them.

We use these cookies because they are strictly necessary to provide the Platform you request, and, where applicable, on the basis of our contract with you and our legitimate interest in keeping the Services secure. Consent is not required for them. If you block them in your browser, you may not be able to sign in, manage API keys, add credits, or use other parts of the Platform.

### 4.2 Analytics cookies

With your permission, we use analytics cookies to understand how people use the Platform, where they run into problems, and how the Platform performs, so that we can fix issues and improve the experience. We use Amplitude, provided by Amplitude, Inc., as our analytics provider.

Analytics cookies are used only after you sign in, and only if you have accepted them. They may collect:

* the pages and screens you visit and the interface elements you use;
* Platform events, such as creating an API key, starting a top-up, or opening usage analytics;
* errors, failed actions, and page loading times;
* device, browser, and screen information, and approximate location at country or city level derived from your IP address; and
* identifiers that let us recognise your browser across visits and link these events to your Platform account.

Analytics never collect the text of your prompts or outputs, the values of your API keys, or payment card details.

We use analytics data only to operate and improve the Platform. We do not sell it, do not use it for advertising, and do not combine it with data from other websites to build profiles of you. We do not share it with third parties for their own purposes. Amplitude processes it on our behalf and only under our instructions.

We rely on your consent for analytics cookies. We do not set them until you choose "Accept all" in the cookie banner, switch analytics cookies on under "Configure", and save, or turn on "Enable analytics cookies" in your account settings. If you have already accepted on another device, your account remembers that choice. Analytics cookies expire after no more than 12 months. We keep analytics data for no longer than 24 months, after which we delete it or keep it only in aggregated form that no longer identifies anyone.

### 4.3 List of cookies

The table below describes the cookies currently used on the Platform. Cookie names and providers may change as we update the Platform; we keep this list up to date.

| Purpose | Category | Set by | Type | Duration |
| - | - | - | - | - |
| Sign-in session (`__Host-ft_session`) | Strictly necessary | Fortytwo | First-party cookie | 30 days; you are signed out sooner after 7 days without activity or when you sign out |
| Trusted device (`__Host-ft_device`) | Strictly necessary | Fortytwo | First-party cookie, set when you sign in with two-factor authentication and leave "Remember this device for 30 days" ticked | 30 days |
| Suspension notice (`__Host-ft_suspension`) | Strictly necessary | Fortytwo | First-party cookie, set only when you sign in to a suspended account, to show you why access is restricted | 15 minutes |
| Connecting a Google account (`fortytwo_oauth_intent`) | Strictly necessary | Fortytwo | Session storage, set only when you connect a Google account in your account settings | Until you return from Google or close the tab |
| Attack-mitigation challenge | Strictly necessary | Vercel, our hosting provider | First-party cookie, set only while a challenge is active | Short-lived; expires when the challenge ends |
| Cookie choices (`fortytwo-consent`) | Strictly necessary | Fortytwo | Local storage; the choice is also saved in your account | In your browser until you sign out, change your choice, or clear your browser storage; in your account until you change it |
| Payment fraud prevention (`__stripe_mid`) | Strictly necessary | Stripe | Cookie set by Stripe's payment form on the credits page | 1 year |
| Payment fraud prevention (`__stripe_sid`) | Strictly necessary | Stripe | Cookie set by Stripe's payment form on the credits page | 30 minutes |
| Analytics identifiers and session (`AMP_` followed by a project identifier) | Analytics | Amplitude, on our behalf | First-party cookie, and local storage for events waiting to be sent | 12 months |

## 5 Your choices

**Cookie banner.** When you first sign in to the Platform, we ask whether you accept analytics cookies. You can choose "Accept all", "Reject all", or "Configure" to choose by category. Rejecting is as easy as accepting, and the Platform works the same way either way. Pages you visit before signing in use only strictly necessary cookies.

**Changing your mind.** You can change or withdraw your choice at any time with "Enable analytics cookies" in your account settings. When you withdraw consent, we stop collecting analytics. Analytics cookies already in your browser are no longer used, and you can delete them in your browser settings. Withdrawal does not affect analytics collected before you withdrew.

**How long we remember your choice.** We remember your choice until you change it. We will ask again if we add a new category of cookies or change how we use analytics cookies in a way that requires fresh consent. We keep a record of your current choice in your account, so that we can demonstrate consent.

**Browser controls.** Most browsers let you block or delete cookies and local storage. Blocking strictly necessary cookies will stop parts of the Platform from working.

**Preference signals.** We honour legally applicable opt-out preference signals, including Global Privacy Control where required. Analytics cookies stay off unless you accept them. Older "Do Not Track" signals are distinct from those rights, and we do not currently respond to them separately.

## 6 What your cookie choice does not change

A cookie choice applies only to the Platform's web interface. It does not change how we process API requests or Customer Content, does not opt you into model training or any data sharing programme, and does not change the default handling described in Sections 2 to 4 of the [Privacy Policy](/legal/privacy-policy). Declining analytics cookies does not limit your access to the Services.

## 7 Third parties and international transfers

**Stripe** provides the payment form on the credits page and sets the payment cookies described above. For some fraud prevention, compliance, and payment activities, Stripe acts independently, as explained in its privacy notice at [https://stripe.com/privacy <Icon icon="arrow-up-right" />](https://stripe.com/privacy) and its cookie policy at [https://stripe.com/cookies-policy/legal <Icon icon="arrow-up-right" />](https://stripe.com/cookies-policy/legal).

**Amplitude** processes analytics data on our behalf and only under our instructions. **Vercel** hosts the Platform's web interface and may set the attack-mitigation cookie described above; it and our other hosting and security providers process cookie data on our behalf in the same way. Each provider, its purpose, the relevant data, and its processing countries are listed in the provider register described in [Section 7 of the Privacy Policy](/legal/privacy-policy#7-who-receives-information), which is published at [/legal/providers](/legal/providers).

Some of these providers may process data outside the country where you are located, including in the United States. Where a transfer requires legal safeguards, we apply the mechanisms described in [Section 8 of the Privacy Policy](/legal/privacy-policy#8-processing-locations-and-international-transfers).

## 8 Your rights

Information collected through cookies can be personal data. Depending on your location and applicable law, including the ADGM Data Protection Regulations 2021, the EU and UK General Data Protection Regulation, and US state privacy laws such as the California Consumer Privacy Act, you have the rights described in [Section 12 of the Privacy Policy](/legal/privacy-policy#12-your-rights-and-choices), including rights of access, deletion, objection, and withdrawal of consent.

We do not sell personal data collected through cookies and do not share it for cross-context behavioural advertising or targeted advertising.

## 9 Changes to this Policy

We will update this Policy when the cookies we use or our practices change, and revise its effective date. We will give appropriate notice of material changes and, where required, ask for your consent again before new non-essential cookies are set. Previous versions are available on request.

## 10 Contact

Questions about this Policy or our use of cookies: [legal@fortytwo.network](mailto:legal@fortytwo.network).

Postal contact: Fortytwo MENA Limited, DD-14-117-013, Floor 14, Al Khatem Tower, WeWork Hub71, ADGM Square, Al Maryah Island, Abu Dhabi, United Arab Emirates.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.